- Simplify processing by centralizing: no need to prefix all errors with
"%lu: %s: " and pass fname, lineno to each; do it in one place.
- Use emalloc and friends instead of homegrown xmalloc and friends.
www/typo3-13: update to 13.4.27
13.4.27 (2026-03-10)
This version is a bugfix and maintenance release. For more information,
please refer: <https://get.typo3.org/release-notes/13.4.27>.
www/php-ja-wordpress: update to 6.9.2
6.9.2 (2026-03-10)
This is a security release that features several fixes.
* A Blind SSRF issue reported by sibwtf, and subsequently by several other
researchers while the fix was being worked on
* A PoP-chain weakness in the HTML API and Block Registry reported by Phat
RiO
* A regex DoS weakness in numeric character references reported by Dennis
Snell of the WordPress Security Team
* A stored XSS in nav menus reported by Phill Savage
* An AJAX query-attachments authorization bypass reported by Vitaly
Simonovich
[12 lines not shown]
www/wordpress: update to 6.9.2
6.9.2 (2026-03-10)
This is a security release that features several fixes.
* A Blind SSRF issue reported by sibwtf, and subsequently by several other
researchers while the fix was being worked on
* A PoP-chain weakness in the HTML API and Block Registry reported by Phat
RiO
* A regex DoS weakness in numeric character references reported by Dennis
Snell of the WordPress Security Team
* A stored XSS in nav menus reported by Phill Savage
* An AJAX query-attachments authorization bypass reported by Vitaly
Simonovich
[12 lines not shown]
archivers/php-pecl-zip: update to 1.22.8
1.22.8 (2026-03-06)
* Fixed bug GH-19932 Memory leak in zip
setEncryptionName()/setEncryptionIndex(). (David Carlier)
* Fix memory leak when passing enc_method/enc_password is passed as option
for ZipArchive::addGlob()/addPattern() and with consecutive calls.
(David Carlier)
* Fix crash in property existence test. (ndossche)
* Don't truncate return value of zip_fread() with user sizes. (ndossche)
lang/ruby34: update to 3.4.9
3.4.9 (2026-03-11)
This release includes an update to the zlib gem addressing CVE-2026-27820,
along with other bug fixes.
What's Changed:
* Bug #21715: Miscompilation on x86-64-v2 due to undefined behavior in
search_nonascii in string.c
* Bug #21787: IO::Buffer Integer Overflow in Range Validation Leads to
Out-of-Bounds Memory Access
* Bug #21757: Splatted args array is mutated when passing unexpected kwargs
* Bug #21326: Instruction generation differences between parse.y and prism
for def a(x, ...); b(...); end
[19 lines not shown]
py-uv py-uv-build: updated to 0.10.9
0.10.9
Enhancements
Add fbgemm-gpu, fbgemm-gpu-genai, torchrec, and torchtune to the PyTorch list
Add torchcodec to PyTorch List
Log the duration we took before erroring
Warn when using uv_build settings without uv_build
Add fallback to /usr/lib/os-release on Linux system lookup failure
Use cargo auditable to include SBOM in uv builds
Configuration
Add an environment variable for UV_VENV_RELOCATABLE
Performance
[17 lines not shown]
defguard-gateway: updated to 1.6.3
1.6.3
This is a security patch for the major 1.6 release.
It includes dependency updates to resolve the following CVEs:
CVE-2026-25541CVE-2026-25727
